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SYSTEM AND METHOD FOR REMOVING SENSITIVE DATA FROM 

DIAGNOSTIC IMAGES 

FIELD OF THE INVENTION 

The present disclosure relates to diagnostic image analysis. More particularly, 
systems and methods for diagnostic image management are disclosed. 

BACKGROUND OF THE INVENTION 

The human body is composed of tissues that are generally opaque. In the past, 
exploratory surgery was one common way to look inside the body. Today, doctors can 
use a vast array of imaging methods to obtain information about a patient. Some non- 
invasive imaging techniques include modalities such as X-ray, magnetic resonance 
imaging (MRI), computer-aided tomography (CAT), ultrasound, and so on. Each of these 
techniques has advantages that make it useful for observing certain medical conditions 
and parts of the body. The use of a specific test, or a combination of tests, depends upon 
the patient's symptoms and the disease being diagnosed. 

Generally, a trained technician performs a number of tasks to record information 
required to diagnose one or more medical conditions using a diagnostic imaging system. 
The technician collects and may even edit portions of the recorded information to identify 
reference points in the anatomy. Regardless of the underlying image acquisition 
modality, the images may be recorded on videotape, fixed disk drives, or other data 
storage devices for later analysis by a physician. 

For example, images acquired and recorded during an ultrasound exam may be 
exported to a networked storage device and saved for later evaluation. Because current 
image acquisition devices do not have the ability to remove patient information from the 
images prior to export, the possibility of a patient confidentiality breach exists each time 
diagnostic images are transferred across a network and/or stored in a network accessible 
data storage device. 

To avoid a breach of confidentiality, patient information must be removed from 
the exported diagnostic images before these images can be used in presentations, training 
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programs, and other such public demonstrations. Image manipulation after export is both 
error prone and labor intensive. In the case of long duration and/or high frame rate image 
loops, it may be necessary to remove patient information from each individual frame of 
the loop. Additionally, hard copy representations of diagnostic images must be partially 
defaced to protect sensitive patient information that appears on the hard copy media. 

SUMMARY OF THE INVENTION 

From the above, it will be appreciated that it is desirable to provide a system and 
method for selectively removing patient information from diagnostic images to protect 
patient confidentiality. It will be further appreciated that it is desirable to have a system and 
method that removes only patient specific identifiers from diagnostic images to enable the 
exported and recorded images to be used for educational purposes and/or public 
presentations. It will also be appreciated that a system and method capable of selectively 
removing patient information from diagnostic images prior to export from an image 
acquisition device will greatly reduce the chance that patient confidentiality could be 
compromised. In addition, removal of patient specific information can be accomplished 
more efficiently within an image management software application or within the image 
acquisition device than could be done after image export altogether. 

Briefly described, in architecture, an image enhancer capable of removing or 
masking sensitive data can be implemented with a user interface, an input device, and an 
image editor. Using the image editor, a user may apply one or more masks to obscure 
sensitive data from both still images and image loops. In addition, the image enhancer 
can be configured to mask sensitive data in multiple image display formats. 

A method for removing sensitive data from one or more images generally includes 
acquiring one or more diagnostic images, identifying sensitive information, modifying the 
appropriate images, and exporting the modified images to a data storage device. 

Other features and advantages of the system and method for removing sensitive 
data will become apparent to one skilled in the art upon examination of the following 
drawings and detailed description. It is intended that all such additional features and 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The invention can be better understood with reference to the following drawings. 
The components in the drawings are not necessarily to scale, emphasis instead being placed 
upon clearly illustrating the principles of the invention. Moreover, in the drawings, like 
reference numerals designate corresponding parts throughout the several views. 

FIG. 1 is a schematic diagram of a medical diagnostic network environment suited 
to image acquisition, evaluation, and storage. 

FIG. 2 is a schematic diagram further detailing the image acquisition system of FIG. 

1. 

FIG. 3 is a functional block diagram illustrating image acquisition in an exemplary 
image acquisition system that can be applied in the medical diagnostic network 
environment of FIG. 1. 

FIG. 4 is a functional block diagram of a general-purpose computer that may be 
operable on any of the three exemplary computing devices shown in the medical diagnostic 
network of FIG. 1. 

FIG. 5 is a functional block diagram illustrating the image enhancer of FIG. 4. 

FIG. 6A is a schematic diagram of an exemplary image display that may be 
generated by the image acquisition system of FIG. 2. 

FIG. 6B is a schematic diagram of an exemplary image display that may be 
generated by the image acquisition system of FIG. 2 and may contain sensitive patient 
information. 

FIG. 6C is a schematic diagram of a patient information mask that maybe applied 
by the image enhancer of FIG. 5 to the sensitive patient information of FIG. 6B. 

FIG. 6D is a schematic diagram illustrating a plurality of patient information masks 
that may be applied by the image enhancer of FIG. 5 to the sensitive patient information of 
FIG. 6B. 

FIG. 7 is a flow chart illustrating a method employed by the image enhancer of FIG. 
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5 for removing sensitive patient information from one or more diagnostic images. 

DETAILED DESCRIPTION 

A medical diagnostic image acquisition, reporting, and storage system is disclosed. 
The improved system selectively masks patient information from diagnostic images during 
image acquisition. Masking during image acquisition and prior to image transfer and/or 
storage via networked devices ensures that patient confidentiality is not compromised. 

The improved system uses an image enhancer to permit a user of the system to 
selectively apply coverage masks over patient information on one or more diagnostic 
images that are to be viewed over networked computing devices. Various patient 
information masks are superimposed over patient identifiers to obscure sensitive 
information that has already been added to diagnostic images. Preferably, one or both 
image editing methodologies are applied prior to storage of exams that may be selected for 
training presentations or other public displays. 

The improved medical diagnostic image acquisition, reporting, and storage system 
may be implemented by integrating the image enhancer with various image acquisition and 
computing devices. It should be appreciated that the image enhancer may be integrated 
with a number of image acquisition devices and is not limited to ultrasound devices alone. 
When associated with ultrasound image acquisition systems, some exemplary clinical 
applications may include imaging of the heart, coronary arteries, coronary flow reserve, 
blood perfusion, and tumor detection by analyzing blood supply to various organs 
throughout the body. 

Referring now in more detail to the drawings, in which like numerals indicate 
corresponding parts throughout the several views, attention is now directed to FIG. 1, 
which illustrates a schematic diagram of a medical diagnostic network environment suited 
to image acquisition, evaluation, and storage. As illustrated in FIG. 1, the image 
acquisition, evaluation, and storage system is generally denoted by reference numeral 10 
and may include an image acquisition system 1 2, a network 14, a data storage device 16, 
and one or more general purpose computers 18, 20. 

The image acquisition, evaluation, and storage system (1AESS) 10 includes at least 
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one image acquisition device connected to a network 14. The image acquisition device can 
be any electronic device capable of generating a diagnostic image. The network 14 can be 
any local area network (LAN) or wide area network (WAN). The LAESS 10 also includes a 
first computer 18 connected to the image acquisition system 12 either via the network 14 as 
5 shown, or alternatively via a direct interface connection (not shown). The first computer 1 8 
may be configured with one or more automated reporting applications that permit a first 
physician to view one or more diagnostic images or image loops acquired by the image 
acquisition system 12. The LAESS 10 may also include a second computer 20 in 
communication with the network 14. The second computer 20 may be configured similarly 
10 to the first computer 18 to permit a second physician to view diagnostic images 

i.O simultaneously with the first physician. As will be described in further detail with respect to 

FIGs. 4 and 5, each computing device 1 8, 20 within the lAESS 10 may be configured with 
an image enhancer that uses one or more input devices to selectively edit diagnostic images. 

;e g It will be appreciated that the image enhancer may be integrated with the image acquisition 

" 15 system 12, in which case all of the functionality described herein is included in a single 

L -4 device. 

p Information can be exchanged over the network 14 using various communication 

^ protocols. For example, transmission control protocol/Internet protocol (TCP/IP) may be 

h* used if the network 14 is a wide area network such as the Internet. Proprietary image data 

20 . communication protocols may also be operable across the network 14. It should be noted 

that although illustrated in FIG. 1 as connected through the network 14, the IAESS 10 is not 
dependent upon network connectivity. 

Those skilled in the art will appreciate that various portions of the IAESS 10 can 
be implemented in hardware, software, firmware, or combinations thereof. In a preferred 
25 embodiment, the IAESS 10 is implemented using a combination of hardware and 

software or firmware that is stored in memory and executed by a suitable instruction 
execution system. If implemented solely in hardware, as in an alternative embodiment, 
the IAESS 10 can be implemented with any or a combination of the following 
technologies which are well known in the art: discrete logic circuits, application specific 
30 integrated circuits (ASICs), programmable gate arrays (PGAs), field programmable gate 
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arrays (FPGAs), etc. 

In the preferred embodiment, the image enhancer is implemented in software and 
executed by a special or general-purpose computer, such as a personal computer, 
workstation, minicomputer, or mainframe computer. It should be noted, however, that 
the image enhancer is not dependent upon the nature of the underlying computer in order 
to perform its function. 

Reference is now directed to FIG. 2, which represents a schematic diagram further 
detailing an exemplary image acquisition system of FIG. 1 . In this regard, FIG. 2 is a 
schematic diagram of a medical diagnostic environment 100 that includes an image 
acquisition system 12, a patient under test 1 50, and a test probe 118 that communicates 
with the image acquisition system 12 via a probe interface conductor 112. The 
user/operator of the image acquisition system places the test probe 118 near a portion of 
the anatomy of the patient under test 150. In accordance with the underlying imaging 
modality, the image acquisition system 1 2 cooperates with the probe 1 1 8 to record one or 
more diagnostic images. As further illustrated in the diagram of FIG. 2, the image 
acquisition electronics system 101 and the display electronics system 105 produce an 
image 500 derived from the recorded electronic signals. It is important to note that some 
medical diagnostic imaging modalities do not use a probe to focus the underlying 
instrument on different structures of the body. For example, MRI systems do not use 
probes. 

Reference is now directed to FIG. 3, which illustrates a functional block diagram 
of an exemplary image acquisition system 12 that may be integrated with the medical 
diagnostic network environment of FIG. 1 . In this regard, the image acquisition system 12 
may include an image acquisition electronics system 101 common to many ultrasound 
imaging systems. As shown in FIG. 3, the image acquisition electronics system 101 may 
be in communication with a transducer 3 1 8 and a display electronics system 105. The 
image acquisition electronics system 101 may include a system controller 31 2 that 
controls the operation and timing of the various elements and signal flow within the 
image acquisition system 12. The image acquisition electronics system 101 may also 
include a transmit controller 314, a radio-frequency (RF) switch 316, a plurality of analog 
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to digital converters (ADCs) 324, a digital filter 326, and one or more image processors 
328. As further illustrated in FIG. 3, the display electronics system 105 may contain a 
video processor 340, a video memory device 342, and a display monitor 344. 

Reference is now directed to FIG. 4, which illustrates a functional block diagram 
of a general-purpose computer that may be operable on any of the three exemplary 
devices (the image acquisition system 12, the first computer 18, and the second computer 
20) shown in the medical diagnostic network of FIG. 1. In this regard, FIG. 4 illustrates 
that the devices may be configured to include an image enhancer 416. 

Generally, computers and/or image acquisition systems that may include the 
image enhancer 416 can be general-purpose computers. The computers and/or image 
acquisition systems may include a processor 400, memory 402, input devices 410, output 
devices 412, and a network interface 414 that communicate with each other via a local 
interface 408. The local interface 408 can be, but is not limited to, one or more buses or 
other wired or wireless connections as is known in the art. The local interface 408 may 
have additional elements, such as buffers (caches), drivers, and controllers (omitted here 
for simplicity), to enable communications. Further, the local interface 408 includes 
address, control, and data connections to enable appropriate communications among the 
aforementioned components. 

The processor 400 is a hardware device for executing software stored in memory 
402. The processor 400 can be any custom made or commercially available processor, a 
central processing unit (CPU) or an auxiliary processor among several processors, and a 
microprocessor or macroprocessor. 

The memory 402 can include any one or a combination of volatile memory 
elements, such as random access memory (RAM, DRAM, SDRAM, etc.), and non- 
volatile memory elements, such as read only memory (ROM), hard drive, tape, CDROM, 
etc. Moreover, the memory 402 may incorporate electronic, magnetic, optical, and/or 
other types of storage media. 

The input devices 410 may include, but are not limited to, a scanner, microphone, 
keyboard, mouse or other interactive pointing device, voice activated interface, or other 
suitable operator machine interface. The input device can also take the form of an image 
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acquisition device. Each of the various input devices 410 may be in communication with 
the processor 400 and/or the memory 402 via the local interface 408. It is significant to 
note that data received from an image acquisition device connected as an input device 
410 or via the network interface 414 may take the form of diagnostic images that are 
5 stored in memory 402 as image files. 

The output devices 412 may include a video interface that supplies a video output 
signal to a display monitor associated with the computer and/or image acquisition system. 
Display monitors associated with these devices can be conventional CRT based displays, 
liquid crystal displays (LCDs), plasma displays, or other display types. The output 

10 devices 412 may also include other well-known devices such as plotters, printers, and 

various film developers. It will be appreciated that a video signal may also be supplied to 
a number of storage devices, such as but not limited to, a videocassette recorder (VCR), a 
compact disc recorder, or similar devices to record a plurality of diagnostic images. 
It is significant to note that the local interface 408 may also be in communication with 

15 input/output devices that connect the computers and/or image acquisition devices to a 
network 14. These two-way communication devices include, but are not limited to, 
modulators/demodulators (modems), network cards, radio frequency (RF) or other 
transceivers, telephonic interfaces, bridges, and routers. For simplicity of illustration, 
such two-way communication devices are not shown. 

20 The information stored in memory 402 may include one or more separate 

programs comprised of executable instructions for implementing logical functions. In the 
example of FIG. 4, the software in memory 402 includes the image enhancer 41 6 and a 
suitable operating system 406. A non-exhaustive list of commercially available operating 
systems includes Windows from Microsoft Corporation, Netware from Novell, and 

25 UNIX, which is available from many vendors. The operating system 406 controls the 
execution of other computer programs, such as the image enhancer 41 6, and provides 
scheduling, input/output control, file management, memory management, communication 
control, and other related services. 

The processor 400 and operating system 406 define a computer platform, for 

30 which application programs, such as the image enhancer 416, may be written in higher 
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level programming languages. It will be appreciated that each of the computers 1 8, 20 
and the image acquisition device 12 may be configured to run a host of applications 
simultaneously using the aforementioned computer platform. It will be further 
appreciated that the software and/or firmware in memory 402 may also include a basic 
5 input output system (BIOS) (not shown). The BIOS is a set of essential software routines 
that test hardware at startup, launch the operating system 406, and support the transfer of 
data among hardware devices. The BIOS is stored in read-only memory and is executed 
when the computer and/or image acquisition device is activated. 

When the computer and/or image acquisition device is in operation, the processor 

10 400 executes software stored in memory 402, communicates data to and from memory 
402, and generally controls operations of the underlying device pursuant to the software. 
The image enhancer 416, the operating system 406, and other applications are read in 
whole or in part by the processor 400, buffered by the processor 400, and executed. 

The image enhancer 416 can be implemented in software, firmware, hardware, or 

1 5 a combination thereof In the preferred embodiment, the image enhancer is implemented 
in software as an executable program and is performed by a general -purpose computer, 
such as a personal computer, workstation, minicomputer, or mainframe computer. 
Alternatively, the image enhancer 416 may be a source program, script, or any other 
entity containing a set of instructions to be performed. Furthermore, the image enhancer 

20 416 can be written in an object oriented programming language, which has classes of data 
and methods, or in a procedure programming language, which has routines, subroutines, 
and/or functions. Examples of these languages include but are not limited to C, C++, 
Pascal, Basic, Fortran, Cobol, Perl, Java, and Ada. In the preferred embodiment, the 
image enhancer 416 is written in C++. 

25 When the image enhancer 416 is implemented in software, as shown in FIG. 4, it 

should be noted that the image enhancer 416 can be stored on any computer readable 
medium for use by or in connection with any computer related system or method. In the 
context of this document, a computer readable medium is an electronic, magnetic, optical, 
or other physical device or means that can contain or store a computer program for use 

30 by, or in connection with a computer related system or method. The computer readable 
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medium can be, for example but not limited to, an electronic, magnetic, optical, 
electromagnetic, infrared, or semiconductor system, apparatus, device, or propagation 
medium. 

Image Enhancer Architecture and Operation 

Reference is now directed to the functional block diagram of FIG. 5, which further 
illustrates the image enhancer 416 of FIG. 4. Shown here, the image enhancer 416 may 
include a user interface 420, an image manager 430, and an image instance 440. 

The user interface 420 is in communication with one or more input devices 410, 
the image manager 430, and the image instance 440. The user interface 420 may consist 
of a plurality of data entry windows or frames that are presented to an operator of the 
image enhancer 416. In this regard, the user interface 420 may take the form of a 
graphical user interface (GUI) that is easily recognizable and operable by technicians and 
other users. For example, the user interface 420 may display application windows, a 
menu bar, and a command bar containing one or more file command push-buttons and 
one or more format command push-buttons. It is important to note that while the user 
interface 420 has been described in terms of data entry windows and frames, it could just 
as easily be implemented through voice activated commands or other human to system 
interfaces. 

In an exemplary implementation, the user interface 420 displays a standard 
computer interface common to popular computer programs. Included therein may be 
several functional items as defined below: 

Menu Bar - Contains one or more labels that activate drop down menus. 

Drop Down Menu - Opens from the menu bar and remains active until an 
available menu option is selected or the menu is closed. 

Pull Down Menu - A submenu typically activated by moving a pointing device 
over an expandable drop down menu option. 

Context-Sensitive Menu — Displays options appropriate to the context in which 
the menu is called. 

Pop-up Menu - Activated upon selection of a feature push-button. 

10 
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Scroll Bar - Allows user to scroll left/right or up/down through a large window. 

It should be appreciated by those skilled in the art that the image enhancer 416 is 
not limited to a particular implementation of the user interface 420. 

The image manager 430 is in communication with image data 432 and an image 
editor 434 that are used to construct standardized displays of diagnostic images acquired 
by an image acquisition system 12 of FIG. 2. For example, a standardized display may 
contain a single image, a thumbnail display, or a composite of multiple related images. 
Furthermore, the image manager 430 and user interface 420 may work together to 
generate an image instance 440 that displays image data 432 in a number of different 
layouts and formats. These layouts and formats may be dictated by the underlying 
imaging modality used to acquire the diagnostic images (radiology, catheterization lab, 
etc.) or may be configured by the user. 

The image manager 430 may also contain an image editor 434. An operator of the 
user interface 420 may use the image editor 434 in conjunction with various input devices 
410 to add identifying information to the image data 432. This identifying information 
may include anatomical labels, acquisition information such as machine settings, data 
related to the subject, and so forth. The image editor 434 may also allow a user to 
selectively apply image masks as will be further explained in association with FIGs. 6C 
and 6D below. 

Preferably, the image enhancer 416 is configured to interface with a plurality of 
output devices 412, which render or convert the image instance 440 into an operator 
observable image 500. For example, the image enhancer 416 may send an image instance 
440 to a display monitor, which then converts the image into a format suitable for general 
viewing. Other output devices 412 may convert the image instance 440 into appropriate 
formats for storage, faxing, printing, electronic mailing, etc. It should be appreciated that 
once the image instance 440 is available in buffers associated with other applications, it is 
no longer dependent upon the image enhancer 416 and can be processed externally. Once 
an image has been stored on a networked device, its data and associated patient 
information may be available to operators with appropriate file access. 

The image enhancer 416 having been described with regard to the general-purpose 
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computer of FIG. 4 and the functional block diagram of FIG. 5, reference is now directed to 
FIG. 6A, which illustrates an exemplary image display 500 that may be generated by the 
image acquisition system 12 of FIG. 2. In this regard, the exemplary image display 500 may 
contain alphanumeric information in the form of patient identifiers 502, date and time 
5 identifiers 504 and scanning parameters 506. In addition to the one or more alphanumeric 
identifiers, the image 500 may also include a diagnostic image 510 of an anatomical 
structure such as a portion of the circulatory system 512. The image 500 represents a 
snapshot of diagnostic image 5 1 0. Because the image enhancer 4 1 6 may be integrated 
into the image acquisition system, it will be appreciated that the diagnostic image 510 
\:j 10 may comprise a loop of multiple images acquired over time. As such, each individual 
CQ image or frame of the loop may contain the aforementioned alphanumeric information. 

rfi Reference is now directed to FIG. 6B, which represents a schematic diagram of an 

Zf exemplary image that may be generated by the image acquisition system 12 of FIG. 2 and 

SJ may contain sensitive patient information. It will be appreciated that patient information in 

1 5 the form of a patient identifier overlay 522 together with the associated diagnostic image 
^ 510 may be transferred to an output device 412 and communicated to each of the computing 

: y devices in the medical diagnostic network of FIG. 1. The patient identifier overlay 522 

; a T may contain alphanumeric information identifying the subject of the diagnostic study, as 

well as other sensitive patient information. 
20 As further illustrated in FIG. 6B, one or more of the patient identifiers included in 

the patient identifier overlay 522 may be undesirable on an image that is intended for 
training purposes or other public presentations. For example, the patient's name, 
insurance identification number (often a social security number), date of birth, and age 
may be deemed undesirable. 
25 In response, the image enhancer 416 may be configured to apply a mask as 

illustrated in FIG. 6C. The image enhancer 416 may provide a check button, menu option, 
or other method to apply a mask 675 over the entire patient identifier overlay 522. If the 
mask 675 is applied during image acquisition, an operator of the image enhancer 416 may 
prevent sensitive patient information from being permanently stored on a data storage 
30 device 16 associated with the network 14. Alternatively, an operator of the image enhancer 
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416 may apply the mask 675 to stored images before creating a training scenario or other 
public presentation. 

In an alternative embodiment, the image enhancer 416 may be configured to apply a 
plurality of masks as illustrated in FIG. 6D. The image enhancer 41 6 may provide a number 
of check buttons, menu options, or other methods to apply masks 680, 682 over various 
portions of the patient identifier overlay 522. As illustrated in FIG. 6D, the image 
enhancer 416 may be configured to apply a "name" mask 680 sized to entirely obscure 
the patient name region of the image. Similarly, an "insured party identification number" 
mask 682 may be applied to obscure the insurance information as well. 

The image enhancer 416 is intended for integration in a number of systems that 
display patient identifiers. Accordingly, the image enhancer 416 may allow an operator 
to selectively locate and resize patient identifier masks 680, 682. It should be appreciated 
that the image enhancer 416 may be configured to recognize and take advantage of 
editing efficiencies that are available with regard to different image display formats. For 
example, an imaging modality that commonly displays multiple images in a particular 
layout may require that one or more patient identifier masks is applied in the same 
location on each image. Once a user has applied a mask to a particular identifier on one 
image, the image enhancer 416 may be programmed to apply the same mask to each 
instance of this identifier on the remaining images. In addition, the image enhancer 416 
may allow a user to apply one or more patient identifier masks to a single image of an 
image loop and copy this mask to all the remaining images in the loop. 

Reference is now directed to the flow chart of FIG. 7, which illustrates a method 
employed by the image enhancer 416 of FIG. 5 for removing sensitive patient information 
from one or more diagnostic images. The method 700 may begin with step 702 labeled, 
"START." First, the underlying image acquisition system maybe initialized as indicated 
in step 704. Next, the technician performing the exam may prepare the patient as shown 
in step 706. In the case of an ultrasound exam, the technician, or other qualified individual 
may introduce one or more contrast agents into the patient's bloodstream or position an 
ultrasound transducer on the patient's chest wall. 

In step 708, one or more diagnostic images may be acquired in accordance with the 
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underlying medical study. It is significant to note that this step may include acquiring a 
plurality of image frames closely related in time to monitor the motion of various 
anatomical structures. For example, the technician may acquire an image loop showing 
several cycles of blood flow through the patient's heart. As illustrated in step 710, the 
5 operator or technician may then be queried to determine if patient information is desired on 
the underlying image frames prior to transfer across the network 14 and/or subsequent 
storage on a data storage device 16. It will be appreciated that this query may be performed 
via numerous interfaces as previously described. It will be further appreciated that the 
query may be performed at any time after initialization of the image acquisition system. It 
0 1 0 will be further appreciated that the method for removing sensitive data from one or more 

nj images 700 may be most effective if the response to the query is entered prior to 

,.*- transferring sensitive data across the network 14. 

'Si When the response to the query of step 710 indicates that patient information is 

U desired on the stored images, the method for removing sensitive data from one or more 

U 1 5 images 700 may proceed to step 71 4 as indicated by the flow arrow labeled, "YES" that 

Q 1 exits step 710. Otherwise, the method for removing sensitive data from one or more 

\j images 700 may proceed to step 712 where the one or more diagnostic images are 

! s f modified to remove one or more patient identifiers. 

At this point, the diagnostic images may be transferred across the network 14 either 
20 to the general-purpose computers 1 8, 20 or to one or more data storage devices 16. As 

indicated in step 716, the operator or technician may then be queried to determine if more 
diagnostic images are desired. If the response to the query of step 716 indicates that more 
images are to be acquired, the method for removing sensitive data from one or more images 
700 may proceed to step 708 as indicated by the flow arrow labeled, "YES" that exits step 
25 716. It will be appreciated that the method for removing sensitive data from one or more 
images 700 may repeat steps 708 through 716 as desired. When the response to the query 
of step 716 is negative, the method for removing sensitive data from one or more images 
700 terminates as illustrated in step 718 labeled, "STOP." 

It is significant to note that process descriptions or blocks in the flow chart of FIG. 7 
30 represent modules, segments, or portions of code which include one or more instructions for 
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implementing specific steps in the method for removing sensitive data from one or more 
images 700. Alternate implementations are included within the scope of the preferred 
embodiment of the image enhancer 4 1 6 in which functions may be executed out of order 
from that shown or discussed, including concurrent execution or in reverse order, depending 
upon the functionality involved, as would be understood by those reasonably skilled in the 
art of the present invention. For example, as described above, it is contemplated that the 
various image-editing processes may be integrated within an image acquisition systeiri, as 
well as within an image enhancer operable on post acquisition processing platforms. 

It should be emphasized that the above embodiments of the image enhancer 416, 
particularly any preferred embodiments, are merely possible examples of implementations 
and are set forth for a clear understanding of the principles of the associated method for 
removing patient sensitive information from one or more diagnostic images 700. Variations 
and modifications may be made to the above embodiments of the image enhancer 416 
without departing substantially from the spirit and principles thereof. All such 
modifications and variations are intended to be included within the scope of this disclosure 
and protected by the following claims. 
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